Description
AppleMobileFileIntegrity in Apple iOS before 10 and OS X before 10.12 mishandles process entitlement and Team ID values in the task port inheritance policy, which allows attackers to execute arbitrary code in a privileged context via a crafted app.
References
- 1036858 vdb-entry
- APPLE-SA-2016-09-20 vendor-advisory
- APPLE-SA-2016-09-20-3 vendor-advisory
- 93056 vdb-entry
- https://support.apple.com/HT207170
- https://support.apple.com/HT207143